Re: Why require CTRL+ALT+DEL for XP sigon

[Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>]

We're dirtier. :)

And it's a food distribution warehouse, if that makes a difference.

On Wed, Oct 14, 2009 at 2:59 PM, Chuck Lewis
<chuck.lewis@xxxxxxxxxxxxxxxxx> wrote:
> Cleaned 3 times a week? Seriously ? They just changed our once a week
> cleaning to once every two weeks :-)
>
> Chuck
>
> -----Original Message-----
> From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx]
> On Behalf Of Jeff Crosby
> Sent: Wednesday, October 14, 2009 1:17 PM
> To: PC Technical Discussion for iSeries Users
> Subject: [PCTECH] Why require CTRL+ALT+DEL for XP sigon
>
> All,
>
> We have 3 users whose PCs are started via WOL at 5am.  All 3 are XP Pro
> and
> are in locked offices.  The primary reason for this 5am WOL is so that
> things like AV scan, spyware scan, any backup, etc, would be done before
> they got here.
>
> Until last June, they were also set up for autologin (TweakUI), meaning
> the
> user was logged on and they had various applications
> (Outlook/Thunderbird,
> 5250 sessions, etc) start before they got here.  That always bugged me a
> bit, but, as I said, they were behind locked doors.  When we set up a
> domain
> at that time, autologin went away due to requiring CAD to log in.
>
> I get asked repeatedly to go back to allowing autologin.  I know how to
> do
> that on a PC by PC basis via gpedit.msc, but I am loathe to do so.  The
> network consultant is as well, he says he has NEVER set up a non-server
> PC
> to do this.  He suggested I tell them 1) if they leave their garage door
> up,
> they won't have to hit the button to open it when they get home, and 2)
> if
> they leave their house unlocked, they won't have to use a key to get in.
> <g>
>
> I have read the MS documentation which says:
>
> "If this policy is enabled on a computer, a user is not required to
> press
> CTRL+ALT+DEL to log on. Not having to press CTRL+ALT+DEL leaves users
> susceptible to attacks that attempt to intercept the users' passwords.
> Requiring CTRL+ALT+DEL before users log on ensures that users are
> communicating by means of a trusted path when entering their passwords."
>
> The offices are cleaned 3 times a week.  Without the CAD restriction,
> either
> the cleaning person or a night warehouseman could press the POWER button
> and
> be good to go.
>
> What else can I give them as reasons?
>
> Thanks.
>
> --
> Jeff
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.